Approved changes feed: RSS · Atom

cpe:2.3:a:omeka:omeka:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOmeka (5ecedf76-51f2-50c6-adc0-f7548d7e731a)
ProductOmeka (c5f89ebd-3f4a-5238-9483-8ae581f3fc35)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/omeka/omeka purl2cpe 2026-06-01 10:15:47.678499
pkg:github/omeka/omeka purl2cpe 2026-06-01 10:15:47.678502

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4158 vulnerable 2026-06-08 06:16:11.666065 Cross-site Scripting (XSS) - Stored in omeka/omeka-s
MEDIUM (6.4)
Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.3.
Published: 2023-08-04T17:16:44.572Z
Updated: 2024-10-09T19:46:08.007Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4157 vulnerable 2026-06-08 06:16:11.663220 Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s
MEDIUM (5.2)
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s prior to version 4.0.3.
Published: 2023-08-04T17:15:29.215Z
Updated: 2024-10-09T19:46:42.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3982 vulnerable 2026-06-08 06:09:40.961653 Cross-site Scripting (XSS) - Stored in omeka/omeka-s
MEDIUM (5.4)
Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.2.
Published: 2023-07-27T18:32:45.355Z
Updated: 2024-10-15T15:25:30.103Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3981 vulnerable 2026-06-08 06:09:40.961022 Server-Side Request Forgery (SSRF) in omeka/omeka-s
MEDIUM (6.5)
Server-Side Request Forgery (SSRF) in GitHub repository omeka/omeka-s prior to 4.0.2.
Published: 2023-07-27T18:28:11.153Z
Updated: 2024-10-15T15:28:05.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3980 vulnerable 2026-06-08 06:09:40.960410 Cross-site Scripting (XSS) - Stored in omeka/omeka-s
MEDIUM (5.4)
Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.2.
Published: 2023-07-27T18:26:20.420Z
Updated: 2024-10-15T15:29:03.050Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26799 vulnerable 2026-06-08 05:30:45.235630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13423 vulnerable 2026-06-08 05:10:51.308956 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5100 vulnerable 2026-06-08 05:05:46.831036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.